/home/estudydev/workspace/eStudy_svn/web/photogallery/reply.php

Go to the documentation of this file.

<?php
/*
ThWboard - PHP/MySQL Bulletin Board System
==============================================
(c) 2000, 2001 by
Paul Baecher         <paul@thewall.de>
Felix Gonschorek   <funner@thewall.de>

download the latest version:
http://www.thwboard.de

This  program is  free  software;  you can
redistribute it and/or modify it under the
terms of the GNU General Public License as
published by the Free Software Foundation;
either  version 2 of  the License,  or (at
your option) any later version.

==============================================

*/
/*--------------------------------------------------------------------------+
This file is part of eStudy.
forum/reply.php
- Modulgruppe:  Forum
- Beschreibung: Antwort auf Beitrag
- Version:      02/26/04
- Autor(en):    Benjamin Stadin <stadin@gmx.de>
+---------------------------------------------------------------------------+
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2
of the License, or any later version.
+---------------------------------------------------------------------------+
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
+--------------------------------------------------------------------------*/
define("PATH_TO_ROOT", "../");

require_once (PATH_TO_ROOT."forum/classes/distribution/class.distributor.inc.php");
require_once (PATH_TO_ROOT."forum/classes/distribution/class.subscribersdistributionhandler.inc.php");
require_once (PATH_TO_ROOT."forum/classes/distribution/class.mustseedistributionhandler.inc.php");
require_once (PATH_TO_ROOT."common/tinymceconfig.inc.php");

require_once (PATH_TO_ROOT."common/init.inc.php");
require_once (PATH_TO_ROOT."common/classes/class.email.inc.php");
if (isset($_POST['Cancel'])) {
    header("Location: ".$_SERVER['PHP_SELF']);
    exit;
}
require_once (PATH_TO_ROOT."common/header.inc.php");
include_once "header.inc.php";
$eStudyPage->appendJavaScriptFile($js);
writeContentHeader("Forum");
include_once "./classes/class.header.inc.php";
// http://www.securiteam.com/securitynews/5FP0C204KE.html
$post['posttext'] = ((isset($_POST['post']['posttext'])) ? $_POST['post']['posttext'] : '');
if ($g_user['userID'] == 0 && !$P->has_permission(P_REPLY)) {
    $navpath.= "Neue Antwort";
    errormessage('Fehler', 'Sie m&uuml;ssen registriert sein, um Beitr&auml;ge erstellen zu k&ouml;nnen');
}
requires_permission(P_REPLY);
if (isset($_SESSION["roleID"])) {
    $role = new Role($_SESSION["roleID"]);
} else $role = null;
if (isset($_SESSION["teamID"])) {
    $team = new Team($_SESSION["teamID"]);
} else $team = null;
$msg = '';
/*
if( (time() - $config['postdelay'] < ((!empty($g_user['userlastpost'])) ? $g_user['userlastpost'] : 0)) && !$P->has_permission( P_NOFLOODPROT ) )
{
$navpath .= "Neue Antwort";
errormessage("Fehler", "Sie können nur alle $config[postdelay] Sekunden einen
neuen Post erstellen.");
}
*/
// ANTI Guest Spamm
if ($g_user['userID'] == 0 && $P->has_permission(P_REPLY)) {
    //prevent_guestspam();

}
$testlen = strlen(preg_replace("/(\s+|(&#032;)+)/", '', ($post['postcode'] ? $mainBBCode->stripTags($post['posttext']) : $post['posttext'])));
if ($testlen < $config['message_minlength']) {
    $msg.= "Der Text ist zu kurz<br/>";
}
if ($testlen > $config['message_maxlength']) {
    $msg.= "Der Text ist zu lang<br/>";
}
// <Vorschau Funktion>
if (isset($post['preview'])) {
    $bbcode = new BBCode(true, $config["imageslevel"] != 2, (bool)$post["postsmilies"], (bool)$post["postcode"], true);
    $post['pretext'] = $bbcode->parse($post['posttext']);
    if (isset($g_user['userhidesig']) && $g_user['userhidesig'] != 1 && !empty($g_user['usersignature']) && !isset($role)) {
        $post['pretext'].= "<br/>--&nbsp;<br/>".$mainBBCode->parse($g_user['usersignature']);
    }
    $replytext = Data::toHTML($post['posttext'], false);
    $Tpostings = new Template("templates/replypreview.html");
    $Tframe = new Template("templates/frame.html");
    $Tpostingrow = new Template("templates/preview.html");
    if (isset($_POST['cx1'])) {
        $picData = $db->get_row("SELECT postfilename, postfilesavename FROM forum_post WHERE threadid=".$thread['threadid']." ORDER BY posttime LIMIT 1");
        if ($picData) {
            $ext = "&amp;ext=".strrchr($picData->postfilename, ".");
            $picPath = PATH_TO_ROOT.$settings["upload_path"].'forum/course/'.$_SESSION['course'].'/board/'.$board['boardid'].'/'.$picData->postfilesavename;
            $cropParam = "&amp;cx1=".$_POST['cx1']."&amp;cy1=".$_POST['cy1']."&amp;cx2=".$_POST['cx2']."&amp;cy2=".$_POST['cy2'];
            $picquotepreview = '        <img src="'.PATH_TO_ROOT.'common/makethumb.php?picurl='.rawurlencode($picPath) .$ext.$cropParam.'" alt="Bildzitat Ansicht" style="border: 1px solid #000000;" />';
            $picquotedata = '
                                <p class="pForm">
                                        <input type="hidden" name="picquote" value="1" />
                                        <input type="hidden" name="cx1" value="'.$_POST['cx1'].'" />
                                        <input type="hidden" name="cy1" value="'.$_POST['cy1'].'" />
                                        <input type="hidden" name="cx2" value="'.$_POST['cx2'].'" />
                                        <input type="hidden" name="cy2" value="'.$_POST['cy2'].'" />
                                </p>
                                ';
            $post['pretext'] = '<div style="text-align: center; width: 100%;">'.$picquotepreview.'<br /><br /></div>'.$post['pretext'];
        }
    } else {
        $picquotedata = '';
    }
    $time = Output::echoDate("d.m.Y, H:i");
    $roleInfoText = "";
    if ($g_user['userID']) {
        $replyusername = Data::toHTML($g_user['username'], false);
        $post['avatar'] = '';
        if (isset($role)) {
            $replyusername.= " (".Data::toHTML($role->getName($_SESSION["gender"]), false) .")";
            $avatarURL = $role->getAvatarURL($g_user["userID"]);
            if (!empty($avatarURL)) {
                $post["avatar"] = "<img src='$avatarURL' alt='Avatar von $replyusername' />";
            }
            $roleInfoText = "<tr><td colspan='2' class='message'>Sie nehmen zur Zeit die Rolle <strong>".Data::toHTML($role->getName($_SESSION["gender"]), false) ."</strong> ein.<br />Wenn Sie einen Beitrag im Forum verfassen, wird dieser unter Ihrem Rollennamen und mit Ihrem Rollenavatar ver&ouml;ffentlicht.</td></tr>";
        }
        if (isset($team)) {
            $replyusername.= " (".$team->getName() .")";
        }
    } else {
        if ($config['guestmode']) {
            $replyusername = Data::toHTML($post['postguestname'], false) ."<p class='pForm'><input type=\"hidden\" name=\"post[postguestname]\" value=\"".Data::toHTML($post['postguestname'], false) ."\"/></p>";
        } else {
            $replyusername = '';
        }
    }
    if ($post['postcode']) {
        $codechecked = ' checked="checked"';
    } else {
        $codechecked = '';
    }
    if ($post['postsmilies']) {
        $smilieschecked = ' checked="checked"';
    } else {
        $smilieschecked = '';
    }
    if ($config['smilies']) {
        $smilies_on_off = "AN";
        $smilietext = "<tr class='tableCell'> <td>Smilies</td> <td> <p class='pForm'><input type='checkbox' id='smilies' name='post[postsmilies]' value='1' $smilieschecked /></p>
                <label for='smilies'>Smilies wie :), ;) usw. als Grafiken darstellen?</label></td></tr>";
    } else {
        $smilies_on_off = "AUS";
        $smilietext = "";
    }
    if ($config['use_email']) {
        $notifyavailable = '';
    } else {
        $notifyavailable = ' (Derzeit nicht verf&uuml;gbar)';
    }
    $navpath.= 'Antwort Vorschau';

    // Evaluation  - Vorschau
    // Abfrage, ob Bewertung vom Autor genehmigt
    $SQL = "SELECT threadrate, userID FROM forum_thread WHERE threadid = '$thread[threadid]'";
    $res = $db->get_row($SQL);
     
   
    $SQL2 = "SELECT sum(firstpost_value) AS anz FROM forum_post WHERE threadid = '$thread[threadid]' AND userID = ". $_SESSION['userid'];
    $res2 = $db->get_row($SQL2);
  
  
  // Summe der von einem Benutzer vergebenen Werte. Da nur einmal bewertet werden kann,
  // ist die Summe ein Wert zw. 0 und 5
        $rating_value = $res2->anz;  
   
    if($res->userID != $_SESSION['userid'])
    {
           
           for($i=0; $i<5; $i++) $checked[$i] = "";
           
           //print_r($_POST['Eval']);
           if(isset($_POST['Eval'][0]))
           {
                   $checked_value= $_POST['Eval'][0]; // liefert den Wert des selectierten Buttons
            
               $checked[5-$checked_value] = "checked='checked'"; 
           
           }
           else
                        $checked_value= 0;
         
           
           
          
           
         
            if (($res->threadrate) == 1 && $rating_value == 0)
            {
                $rating ="<tr class='tableCell'>
                                                <td>Bewertung</td>
                                                <td>
                                                        <label for='preview'>Qualität des Themas</label><br/>
                                                        <p class='pForm'>
                                                        <input type='radio' name='Eval[]' ". $checked[0] ." value='5'> sehr gut
                                                        <input type='radio' name='Eval[]' ". $checked[1] ." value='4'> gut
                                                        <input type='radio' name='Eval[]' ". $checked[2] ." value='3'> mittel
                                                        <input type='radio' name='Eval[]' ". $checked[3] ." value='2'> wenig brauchbar
                                                        <input type='radio' name='Eval[]' ". $checked[4] ." value='1'> unbrauchbar                      
                                                                </p>
                                                </td>
                                        </tr>";
            }
            elseif (($res->threadrate) == 0 && $rating_value == 0)
            { 
                $rating="<tr class='tableCell'>
                                                <td>Bewertung</td>
                                                <td>Der Autor lässt keine Bewertung des Eintrags zu!</td>
                                        </tr>";         
            }   
            else        
        { 
                switch($rating_value){
                        case 1: $value_str="unbrauchbar"; break;
                        case 2: $value_str="wenig brauchbar"; break;
                        case 3: $value_str="mittel"; break;
                        case 4: $value_str="gut"; break;
                        case 5: $value_str="sehr gut"; break;
                        default: $value_str=""; break;
                        
                }
                
                
                $rating="<tr class='tableCell'>
                                                <td>Bewertung</td>
                                                <td>Sie haben bereits mit &quot;" . $value_str  ."&quot; abgestimmt!</td>
                                        </tr>";         
            }   
    }
    
    else $rating="";
    
    

    // DATEIANHÄNGE:
    $courseID = $_SESSION['course'];
    $r_filesAllowed = forum_query("SELECT filesallowed FROM forum_board as board WHERE boardid = $board[boardid] AND is_photogallery=1");
    $filesAllowed = mysql_fetch_array($r_filesAllowed);
    if ($filesAllowed['filesallowed']) // Datei-Upload ist erlaubt.
    {
        $maxFileSize = upload::getMaxFileSize();
        if ($maxFileSize > 1024) {
            $showMaxFileSize = round($maxFileSize/1024, 2) ."&nbsp;MB";
        } else $showMaxFileSize = $maxFileSize."&nbsp;KB";
        $post['fileuploadrow'] = "<tr class='tableCell'> <td>Datei</td> <td> <p class='pForm'><input type='hidden' name='MAX_FILE_SIZE' value='".($settings["forum_max_filesize"]*1024) ."'/><input class='tbinput' type='file'
                name='userfile' size='20' /></p> maximal $showMaxFileSize</td></tr>";
    } else
    // Datei-Upload ist nicht erlaubt.
    {
        $post['fileuploadrow'] = "";
    }
    // DATEIANHÄNGE
    eval($Tpostings->GetTemplate("RFORM"));
    eval($Tpostingrow->GetTemplate("CONTENT"));
    eval($Tframe->GetTemplate());
    include_once "footer.inc.php";
    require_once (PATH_TO_ROOT."common/footer.inc.php");
    exit;
}
// </Vorschau Funktion>
if ($_FILES['userfile']['name'] && $_FILES['userfile']['size'] == 0) {
    $msg.= "Fehler beim Upload der Datei... (@ Admin - php.ini &uuml;berpr&uuml;fen?!)";
}
if (($_FILES['userfile']['size']) != 0) {
    // DATEIANHÄNGE:
    // Wenn die Datei die maximale Dateigröße($postfile_maxsize; definiert in config.inc.php)
    // überschreitet, wird eine Fehlermeldung ausgegeben.
    // ACHTUNG: In PHP Core gibt die Variable upload_max_filesize die tatsächliche
    // maximale Dateigröße an... müsste vom Server-Admin modifiziert werden.
    $filesize = $_FILES['userfile']['size'];
    if (!(upload::fileSizeOK($filesize))) {
        $msg.= "Die Datei ist zu gro&szlig;!<br/>";
    }
    // DATEIANHÄNGE
    // DATEIANHÄNGE:
    // Wenn die Datei ein unerlaubtes Dateiformat hat(*.exe, *.mp3),
    // wird eine Fehlermeldung ausgegeben.
    if (!(upload::fileExtOK($_FILES['userfile']['name'], 1))) {
        $msg.= "Die Datei hat ein unerlaubtes Dateiformat.";
    }
    // DATEIANHÄNGE

}
// andere error messages l&ouml;schen, nur diese
if ($thread['threadclosed'] == 1) {
    $msg = "Dieser Thread ist leider geschlossen, es k&ouml;nnen keine weiteren Antworten erstellt werden.";
}
if (isset($msg) && strlen($msg) > 0) {
    $navpath.= "Neue Antwort";
    errormessage("Fehler", "Es sind leider folgende Fehler aufgetreten:<br/><br/>$msg");
}
$ctime = time();
if ($g_user['userID'] == 0 && $P->has_permission(P_REPLY)) {
    $g_user['username'] = $config['guestprefix'].$post['postguestname'];
    $post['postguestname'] = $config['guestprefix'].addslashes($post['postguestname']);
} else {
    $post['postguestname'] = '';
}
if ($config["usebwordprot"] >= BWORD_POST) {
    $post["posttext"] = check_banned($post["posttext"]);
}
if (isset($config['auto_close']) && $config['auto_close'] > 0) {
    forum_query("UPDATE forum_thread SET threadclosed = '1' WHERE threadtime < '".(time() -(($config['auto_close']+1) *86400)) ."'");
}
if (isset($config['auto_delete']) && $config['auto_delete'] > 0) {
    forum_query("DELETE FROM forum_thread WHERE threadtime < ".(time() -($config['auto_delete']*86400)) ."");
}
// DATEIANHÄNGE:
// Wenn eine Datei für den Upload angegeben wurde, werden zunächst die Felder für die DB-Tabelle forum_post
// mit den übergebenen Werten initialisert.
// Anschliessend wird die Datei im angegebenen Pfad $uploaddir gespeichert.
if (($_FILES['userfile']['size']) != 0) {
    $post['postfilename'] = $_FILES['userfile']['name'];
    $post['postfilesavename'] = $_SESSION['userid'].time() .$_SESSION['course'];
    $post['postfilesize'] = $_FILES['userfile']['size'];
    $courseID = $_SESSION['course'];
    $boardID = $board['boardid'];
    // Die Verzeichnisstruktur von $uploaddir setzt sich aus der courseID und der boardID zusammen,
    // da dies beim Löschen von Kursen und Boards vorteilhaft ist.
    $uploaddir = PATH_TO_ROOT.$settings["upload_path"]."forum/course/".$courseID."/board/".$boardID;
    Utilities::mkdir_r($uploaddir);
    // Speichern der Datei
    if (!(@move_uploaded_file($_FILES['userfile']['tmp_name'], $uploaddir."/".$post['postfilesavename']))) {
        $msg.= "Fehler beim Speichern der Datei!<br/>";
    }
}
// DATEIANHÄNGE
// DATEIANHÄNGE:
// Eintragen von postfilename, postfilesavename, postfilesize in die Tabelle forum_post
// ANONYMES POSTEN:
// Eintragen von $g_user[userID] = 0 ("Anonymous")
if(isset($_POST['Eval'][0]))
{
                $checked_value= $_POST['Eval'][0]; // liefert den Wert des selectierten Buttons
}
else
           $checked_value=0;



forum_query("INSERT INTO forum_post (posttime, posttext, userID, threadid, postsmilies, postcode, postguestname, postfilename, postfilesavename, postfilesize, firstpost_value)
        VALUES('$ctime',
        '".Data::toMysql($post['posttext'], false) ."',
        '".intval($g_user['userID']) ."',
        '".intval($thread['threadid']) ."',
        '".($post['postsmilies'] ? 1 : 0) ."',
        '".($post['postcode'] ? 1 : 0) ."',

        '".(isset($post['postguestname']) ? Data::toMysql($post['postguestname'], false) : '') ."',
        '".(isset($post['postfilename']) ? Data::toMysql($post['postfilename'], false) : '') ."',
        '".(isset($post['postfilesavename']) ? Data::toMysql($post['postfilesavename'], false) : '') ."',
        '".(isset($post['postfilesize']) ? intval($post['postfilesize']) : 0) ."'," .
                        Data::toMysql($checked_value) .")");
$post["postid"] = mysql_insert_id();
// DATEIANHÄNGE
// ANONYMES POSTEN
$lastPostBy = $g_user['username'];
if (isset($role)) {
    RoleArtefacts::setRoleForItem(FORUM, $post["postid"], $_SESSION["roleID"]);
    $lastPostBy.= " (".$role->getName($_SESSION["gender"]) .")";
}
if (isset($team)) {
    TeamArtefacts::setTeamForItem(FORUM, $post["postid"], $_SESSION["teamID"]);
    $lastPostBy.= " (".$team->getName() .")";
}
// Replys um 1 erh&ouml;hen in der board datenbank
forum_query("UPDATE forum_board SET
        boardlastpost='$ctime',
        boardposts=boardposts+1,
        boardlastpostby='".Data::toMysql($lastPostBy, false) ."',
        boardthreadtopic='".Data::toMysql($thread['threadtopic'], false) ."',
        boardthreadid='$thread[threadid]' WHERE boardid='$board[boardid]' AND is_photogallery=1");
if ($g_user['userID']) {
    // Den postings wert des postenden users erh&ouml;hen
    forum_query("UPDATE forum_user SET userlastpost=$ctime, userposts=userposts+1 WHERE userID='$g_user[userID]'");
}
// Replys um 1 erh&ouml;hen in der topic datenbank + time aktualisieren
$lastReplyBy = $g_user['username'];
if (isset($role)) {
    $lastReplyBy.= " (".$role->getName($_SESSION["gender"]) .")";
}
if (isset($team)) {
    $lastReplyBy.= " (".$team->getName() .")";
}
forum_query("UPDATE forum_thread SET threadtime='$ctime', threadreplies=threadreplies+1,
        threadlastreplyby='".Data::toMysql($lastReplyBy, false) ."' WHERE threadid='$thread[threadid]'");
        // Abo
        $arrBoardInfo = mysql_fetch_array(forum_query("SELECT mustsee FROM forum_board as board WHERE boardid = $board[boardid] AND is_photogallery=1"));
        if ($arrBoardInfo['mustsee'] == 0)
                $objDistributionHandler = new SubscribersDistributionHandler(false, $board, $thread, $g_user, $post, $config, $course_name, $settings, $mainBBCode, $db);
        else
                $objDistributionHandler = new MustseeDistributionHandler(false, $board, $thread, $g_user, $post, $config, $course_name, $settings, $mainBBCode, $db);
        $objDistributor = new Distributor();
        $objDistributor->setDistributionHandler($objDistributionHandler);
        $objDistributor->distribute();
        // Abo Ende
// ------------------------------------------------- Bildzitat einfŸgen
if (isset($_POST['picquote']) && $post['postid']) {
    $db->query("INSERT INTO photogallery_picquote VALUES ('', ".intval($thread['threadid']) .", ".$post['postid'].", ".$_POST['cx1'].", ".$_POST['cy1'].", ".$_POST['cx2'].", ".$_POST['cy2'].") ");
}
message_redirect("Eintrag erfolgreich", "showtopic.php?threadid=$thread[threadid]&time=$ctime&pagenum=lastpage");
include_once "footer.inc.php";
require_once (PATH_TO_ROOT."common/footer.inc.php");
?>

---